Parallel Hierarchical Password Protection for Document Sections
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for protecting electronic documents often require a single password to access the entire document, which can lead to data leakage and inefficiencies when different users need access to different sensitive sections, as they must share multiple documents or re-share content.
Innovation Solution
Implementing parallel and hierarchical password protection systems that allow specific sections of an electronic document to be encrypted with unique cryptographic keys, enabling users to access only authorized sections using corresponding passwords, while maintaining security and simplifying collaboration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single password is used to protect the entire document, then the document structure remains simple and easy to manage, but data leakage risk increases and selective access control becomes impossible
Solution Approach 1:
The patent divides the document into multiple sections, each with its own password protection. Instead of applying a single password to the entire document, the system segments the document structure and applies granular access control to specific sections. This allows different users to access different sections based on their authorization, preventing data leakage while maintaining a manageable system.
Solution Approach 2:
The patent implements differential password protection where different sections of the document have different security requirements. Each section can be encrypted with a unique password, allowing the system to apply the appropriate level of security to each local area of the document rather than uniformly protecting the entire document. This enables selective access control while keeping the overall system structure relatively simple.
2Reliability
If multiple documents are created to protect different sensitive sections, then selective access control is achieved, but device complexity and management difficulty increase
Solution Approach 1:
The patent combines multiple password-protected sections within a single document structure. Instead of creating separate documents for different sensitive sections, the system merges them into one document with integrated password protection. The document structure includes multiple sections, each with its own encryption key, allowing users to access the entire document or specific sections based on their password, thereby simplifying management while maintaining selective access control.
Solution Approach 2:
The patent creates a universal password protection system that can handle multiple access scenarios within a single document. The system supports both full-document access and section-specific access through a unified interface. Users can enter passwords to access either the entire document or specific sections, eliminating the need for separate document management and providing multi-functional access control in one system.
3Reliability
If users need to share specific sections with different users, then data security is improved, but collaboration efficiency decreases due to re-sharing requirements
Solution Approach 1:
The patent applies password protection to specific sections in advance during document creation. The document is pre-configured with encrypted sections and associated passwords, allowing users to directly access authorized sections without requiring subsequent re-sharing. The section owner can distribute the password beforehand, and users can immediately access the protected sections when needed, eliminating the need for iterative re-sharing and improving collaboration efficiency.
Solution Approach 2:
The patent introduces passwords as intermediaries between the section owner and users needing access. Instead of directly sharing sections or requiring complex permission management, the password serves as a simple mediator that grants access to authorized users. The section owner distributes passwords to users who need access to specific sections, and the system automatically handles the access control, simplifying the collaboration process while maintaining security.
Data Source
AI summary
The present disclosure involves systems and computer implemented methods for protecting portions of electronic documents. An example method includes receiving a request for access to an electronic file having sections, at least one section encrypted using a first key based on a first password. A second key is generated in response to receiving a second password, wherein the second key is generated based on the second password. The second key is compared to the first key. If the second key is identical to the first key, the least one section of the electronic file encrypted using the first key is decrypted using the second key. The electronic file is then presented such that the section(s) previously encrypted using the first cryptographic key is made visible. If the second key is not identical to the first, the electronic file is presented with the encrypted section(s) obscured.